ZeroHour

CVE-2021-21507

CVSS 3.1
9.8 critical
EPSS
<1%p44
Published
()
Modified
Description

Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.

Vendors
dell
Products
x1008p firmware, x1018p firmware, x1026p firmware, x1052p firmware, x4012 firmware, r1-2401 firmware, r1-2210 firmware, x1008 firmware, x1018 firmware, x1026 firmware, x1052 firmware
Weakness
CWE-261, CWE-326
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.